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Listing of Claims; 

Claims 1-29 (Canceled) . 

30. (New) A database management apparatus comprising: 

a database storage unit which stores a database comprising a 
plurality of records, each record including a plurality of data ' 
segments identified by respective item titles; 
5 an item title memorizing unit for memorizing at least one 

item title for specifying a corresponding at least one data 
segment group as a target of a data search process; 

a key data memorizing unit for memorizing keys for use in 
encryption associated with the database, wherein the keys 
10 comprise a column key corresponding to the at least one data 

segment group specified by the at l&ast one memorized item title, 
and a plurality of different row keys corresponding respectively 
to the records of the database; and 

an encryption unit for encrypting: (i) the data segments of 
15 said at least one specified data segment group using the 

corresponding column key, and (ii) data segments of at least one 
data segment group corresponding to item titles other than the 
memorized item titles, in units corresponding to the records, 
using the different row keys of the respective records. 
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31. (New) The apparatus according to claim 30 further 
comprising: 

a functional unit which encrypts a received data set 
comprising a search process condition using the corresponding 
5 column key; and 

a database search unit which performs the data search 
process by comparing the encrypted search process condition with 
the encrypted data segments of said at least one specified group. 

32. (New) The apparatus according to claim 30, wherein the 
encryption unit sequentially generates vectors in a 
multidimensional space based on a set of predetermined functions, 
and the data segments are eneryptcad in accordance with an 

5 encryption method in which components of the sequentially 

generated vectors form a key stream of a key associated with the 
encryption method, and 

wherein the row keys and the column key specify constants of 
the functions, 

33. (New) A database system comprising a first information 
processor terminal storing a database, and a second information 
processor terminal which is connected to the first information 
processor terminal via a network and which is adapted to send a 

5 request to the first information processor terminal for 
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conducting a search process in the database, wherein the first 
information processor terminal comprises: 

a functional unit which encrypts: (i) data segments 
forming data segment groups corresponding to column item titles 

10 of a first kind using a column key common to the data segment 
groups and, (ii) data segments forming data segment groups 
corresponding to column item Litles of a second kind, in units of 
rows of data segments, using respective row keys; 

wherein the second information processor terminal comprises: 

15 a transmitting unit which transfers via the network, an 

encrypted data set representing conditions to be used for the 
search process in the first information processor terminal, when 
the second information processor terminal requests the first 
information processor terminal to perform the search process on 

20 the database, said encrypted data set being formed by encrypting 
an input data set specifying the conditions of the search process 
by using the column key; and 

wherein the first inf ormaLion processor terminal further 
comprises : 

25 a search performing unit that performs the search 

process on the encrypted database, based on the transmitted 
encrypted data set; and 
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a returning unit that returns an encrypted result data 
set resulting from the search process, to the second information 
30 processing terminal via the network. 

34. (New) A database management apparatus comprising: 
a key specification memorizing unit that memorizes data 
specifying a type of encryption system to be used to encrypt data 
segments of each column of a database, if the column of the 
5 database is to be encrypted; 

a first encryption unit that encrypts in accordance with the 
data memorized by the key specification memorizing unit: (i) data 
segments forming data segment groups corresponding to column item 
titles of a first kind using a same column key, and (ii) data 
10 segments . forming data segment groups corresponding to column item 
titles of a second kind, in units of rows of the database, using 
row keys respectively specified for each of the rows; 

a second encryption unit that encrypts, using a basic key, 
all of the row keys used by the first encryption unit; 
15 a key data generating unit that generates the column key, 

the row keys and the basic key; and 

a storing operation unit which stores in a memory the 
database after encryption by the first encryption unit and the 
row keys after encryption by the second encryption unit, in a 
20 mutually associated manner. 
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35, (Mew) The apparatus according to claim 34, wherein the 
row keys are each generated based on a number of the respective 
rows and a random number. 

36- (New) The apparatus according to claim 34, wherein a 
vector generation unit sequentially generates vectors confined to 
a closed subspace of an n-dimensional space and defined by 
functions based on the keys; and 
5 wherein a logical operation unit performs a logical 

operation in unity of a bit involving both the data segments of 
the database and components of the vectors generated by the 
vector generation unit, to encrypt the data segments. 

37. (New) A method for managing a database system including 
a first terminal unit for managing the database and a second 
terminal unit for searching the database independently of the 
first terminal unit, said method comprising: 
5 encrypting the database by encrypting/ on a first terminal 

side of the system: (i) data segments forming data segment groups 
corresponding to column item titles of a first kind using a same 
column key, (ii) data segments forming data segment groups 
corresponding to column item titles of a second kind, in units of 
10 rows of the database, using row keys respectively specified for 
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each of the rows, and (iii) all of the row keys, using another 
key; 

storing, at the first terminal unit side of the system, the 
encrypted database on portable storage medium units for 
15 distribution; and 

searching the encrypted database stored on any of the 
distributed storage medium units, decrypting a data set obtained 
as a search result/ and displaying the decrypted data set at a 
second terminal unit side oL the system. 

38. (New) The database management method according to 
claim 37, wherein each of the storage medium units stores both 
the encrypted database generated by the first terminal unit, and 
a predetermined application program for performing a searching 

5 process on the encrypted database. 

39. (New) A computer-readable storage medium with a program 
stored thereon for directing a computer to: 

encrypt, in a first mode, data segments forming data segment 
groups corresponding to column item titles of a first kind using 
5 a same column key, said data segments being elements of a 
database; 

encrypt, in a second mode, data segments forming data 
segment groups corresponding to column item titles of a second 
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kind using respective row keys corresponding to respective rows 
10 of the database; and 

encrypting all the row keys used in the second mode using 
another key assigned commonly for the respective rows. 

40- (New) A database management apparatus, comprising: 
a database storage unit which stores a database comprising a 
plurality of records, each record .including a plurality of data 
segments identified by respective item titles; 
5 an item title memorizing unit for memorizing at least one 

item title for specifying a corresponding at least one data 
sequent group as a target of a data search process; 

a key data memorizing ur.it for memorizing keys for use in 
encryption associated with the database, wherein the keys 
10 comprise a column key corresponding to said at least one data 

se g men t group specified by the at least one memorized item title, 
and a plurality of different row keys corresponding respectively 
to the records of the database; and 

an encryption un.it for encrypting: (i) the data segments of 
15 said at least one specified data segment group using the column 
key, and (ii) data segments of at least one data segment group 
corresponding to item titles other than the at least one 
memorized item title, in -units corresponding to the records, 
using the different row keys corresponding to the respective 
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20 records and another column key that is assigned commonly to the 
data segment groups corresponding to item titles other than the 
at least one memorized item Li tie. 

41. (New) A computer program for directing a computer to 
execute functions comprising: 

accessing a database comprising a plurality of records, each 
record including a plurality of data segments identified by 
5 respective item titles; 

memorizing at least one item title for specifying a 
corresponding at least one d^ta segment group as a target of a 
data search process; 

memorizing keys for use in encryption associated with the 
10 database, wherein the keys comprise a column key corresponding to 
said at least one data segment group specified by the at least 
one memorized item title, and a plurality of different row keys 
corresponding respectively to the records of the database; and 

encrypting: (i) the data segments of said at least one 
15 specified data segment group, using the corresponding column key, 
and (ii) data segments of at least one data segment group 
corresponding to item titles other than the memorized item 
titles, in units corresponding to the records, using the 
different row keys of the respective records. 
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42- (New) A computer program for directing a computer to 
execute functions comprising: 

memorizing data specifying a type of encryption system to be 
used to encrypt data segments of each column of a database, if 
5. the column of the database is to be encrypted; 

first encrypting in accordance with the data memorized by 
the key specification memorizing unit: (i) data segments forming 
data segment groups corresponding to column item titles of a 
first kind using a same column key, and (ii) data segments 
10 forming data segment groups corresponding to column item titles 
of a second kind, in units of rows of the database, using row 
keys respectively specified for each of the rows; 

.second encrypting, with a basic key, all the row keys; and 

storing in a memory the database after the encryption 
15 thereof and the row keys after encryption the encryption thereof, 
in a mutually associated manner. 
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